Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,649
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,964 recordsRanked by popularity · browse by tag · record statistics
PyPI
31At Riskhealth index
overviewer/Minecraft-Overviewer
Render high-resolution maps of a Minecraft world with a Leaflet powered interface
Python · C★ 3,498Sep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
RubyGems
46Weakhealth index
collectiveidea/audited
Audited (formerly acts_as_audited) is an ORM extension that logs all changes to your Rails models.
Ruby★ 3,497Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
19Criticalhealth index
opentracing/opentracing-go
OpenTracing API for Go. 🛑 This library is DEPRECATED! https://github.com/opentracing/specification/issues/163
Go★ 3,478Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
ferredoxin/QNotified
一个旨在使QQ变得更好用的开源Xposed模块
Java · Kotlin · C++★ 3,465Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
michelf/php-markdown
Parser for Markdown and Markdown Extra derived from the original Markdown.pl by John Gruber.
PHP · HTML★ 3,462↓ 779.1K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
—
12Criticalhealth index
rcrowley/go-metrics
Go port of Coda Hale's Metrics library
Go★ 3,460Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
piskvorky/smart_open
Utils for streaming large files (S3, HDFS, gzip, bz2...)
Python★ 3,458↓ 70.7M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
mayuki/Cocona
Micro-framework for .NET console application. Cocona makes it easy and fast to build console applications on .NET.
C#★ 3,452Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
46Weakhealth index
ulid/javascript
Universally Unique Lexicographically Sortable Identifier
TypeScript · JavaScript★ 3,445↓ 40.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
—
36Weakhealth index
matro7sh/BypassAV
This map lists the essential techniques to bypass anti-virus and EDR
Mixed★ 3,442Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
stevenpetryk/mafs
React components for interactive math
TypeScript★ 3,434↓ 123.2K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
devongovett/regexgen
Generate regular expressions that match a set of strings
JavaScript★ 3,422↓ 1M/moSep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
45Weakhealth index
decalage2/oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
Python★ 3,414↓ 7.6M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
browserbase/mcp-server-browserbase
Allow LLMs to control a browser with Browserbase and Stagehand
TypeScript★ 3,405↓ 9,589/moOct 7, 2026
Apache-2.0Oct 7, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
padrino/padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
Ruby · Less★ 3,400Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
openhab/openhab1-addons
Add-ons for openHAB 1.x
Java★ 3,396Sep 11, 2026
EPL-2.0Sep 11, 2026 · metrics 2.10.0
Go
19Criticalhealth index
gobuffalo/packr
The simple and easy way to embed static files into Go binaries.
Go★ 3,385Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
zephir-lang/zephir
Zephir is a compiled high-level language aimed to ease the creation of C-extensions for PHP
PHP · C★ 3,381↓ 6,489/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
crates.io · PyPI
34At Riskhealth index
servo/webrender
A GPU-based renderer for the web
Rust★ 3,377↓ 217K/moOct 20, 2026
MPL-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
databricks/koalas
Koalas: pandas API on Apache Spark
Python★ 3,375↓ 666.1K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
41Weakhealth index
esamattis/underscore.string
String manipulation helpers for javascript
JavaScript★ 3,358Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
RubyGems
66Goodhealth index
deivid-rodriguez/byebug
Debugging in Ruby
Ruby · C★ 3,352Oct 23, 2026
BSD-2-ClauseOct 23, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
sensiolabs/SensioFrameworkExtraBundle
An extension to Symfony FrameworkBundle that adds annotation configuration for Controller classes
PHP★ 3,350↓ 901.8K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
krisleech/wisper
A micro library providing Ruby objects with Publish-Subscribe capabilities
Ruby★ 3,334Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
linq2db/linq2db
Linq to database provider.
C#★ 3,326Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
25At Riskhealth index
valyala/quicktemplate
Fast, powerful, yet easy to use template engine for Go. Optimized for speed, zero memory allocations in hot paths. Up to 20x faster than html/template
Go★ 3,324Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
34At Riskhealth index
docker/docker-agent
AI Agent Builder and Runtime by Docker Engineering
Go★ 3,318Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
resemble-ai/Resemblyzer
A python package to analyze and compare voices with deep learning
Python★ 3,304↓ 249.1K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
cyu/rack-cors
Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
JavaScript · Ruby★ 3,289Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
erdewit/ib_insync
Python sync/async framework for Interactive Brokers API
Python★ 3,282↓ 790K/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0